Core FTP 'AUTH SSL' 命令拒绝服务漏洞

BUGTRAQ ID: 65432 CVECAN ID: CVE-2014-1441 CoreFTP是免费的FTP客户端。 Core FTP 1.2 build 511及其他版本处理AUTH SSL命令时存在错误，这可使攻击者通过特制的SSL证书，造成服务器崩溃。 0 Core FTP Core FTP 1.x 厂商补丁： Core FTP -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.coreftp.com/...

Core FTP Server Detection

Binary data coreftpserverdetect.nbin...

Serv-U FTP Server < 15.0.1.20 DoS

According to its banner, the installed version of Serv-U is a version prior to version 15.0.1.20. It is, therefore, affected by an unspecified denial of service vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Core FTP 'USER' 命令信息泄露漏洞

BUGTRAQ ID: 65428 CVECAN ID: CVE-2014-1443 CoreFTP是免费的FTP客户端。 Core FTP 1.2 build 511及其他版本处理XCRC命令时存在错误，这可使攻击者利用目录遍历序列，获取FTP根目录以外的文件名。 0 Core FTP Core FTP 1.x 厂商补丁： Core FTP -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.coreftp.com/ Proof of Concept: 1 Log into the Core FTP Server with a...

Core FTP Server < 1.2 Build 515 Multiple Vulnerabilities

The version of Core FTP running on the remote host is prior to 1.2 build 515. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists that is triggered when handling malformed data after the 'AUTH SSL' command. An unauthenticated, remote attacker can...

Core FTP Server < 1.2 Build 508 lstrcpy Overflow Code Execution

The version of Core FTP running on the remote host is prior to 1.2 build 508. It is, therefore, affected by buffer overflow conditions in the RegQueryValueExA and lstrcpy functions due to improper validation of user-supplied input when reading data from the config.dat file and/or from the Windows...

PCMan's FTP Server 'ABOR'命令缓冲区溢出漏洞

BUGTRAQ ID: 65289 PCMan's FTP Server是简单易于的基础FTP服务器。 PCMan's FTP Server 2.07版本在处理特制的USER, PASS, STOR, ABOR, CWD命令时没有正确验证用户提供的输入，在实现上存在溢出漏洞，这可使远程攻击者造成拒绝服务，执行任意代码。 0 sourceforge PCMan's FTP Server 2.07 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sourceforge.net/projects/pcmanftpd/ Exploit...

PCMan FTP Server 2.07 - Remote Buffer Overflow

Exploit Title: PCMAN FTP 2.07 Long Command Buffer Overflow unauthenticated Date: Feb 19, 2014 Exploit Author: Sumit Version: 2.07 Tested on: Windows XP Professional SP3 Description: Buffer overflow is triggered upon sending long string to PCMAN FTP 2.07 in place of command import socket import...

kernel

New kernel packages are available for Slackware 14.1 64-bit to fix a security issue. Here are the details from the Slackware64 14.1 ChangeLog: patches/packages/linux-3.10.17-2/: These are new kernels that fix CVE-2014-0038, a bug that can allow local users to gain a root shell. Be sure to reinsta...

PCMan's FTP Server 'CWD'命令缓冲区溢出漏洞

BUGTRAQ ID: 65299 PCMan's FTP Server是简单易于的基础FTP服务器。 PCMan's FTP Server 2.07版本在处理特制的USER, PASS, STOR, ABOR, CWD命令时没有正确验证用户提供的输入，在实现上存在溢出漏洞，这可使远程攻击者造成拒绝服务，执行任意代码。 0 sourceforge PCMan's FTP Server 2.07 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sourceforge.net/projects/pcmanftpd/ Exploit...

Linksys EA2700, EA3500, E4200, EA4500 Authentication Bypass

Linksys products EA2700, EA3500, E4200, and EA4500 suffer from having an unauthenticated interface on port 8083 periodically. Vulnerable products : Linksys EA2700, EA3500, E4200, EA4500 Vulnerability: Due to an unknown bug, which occurs by every indication during the installation and/or upgrade...

NetGear DGN2200 N300 Wireless Router Multiple Vulnerabilities (Feb 2014) - Active Check

NetGear DGN2200 N300 Wireless Routers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: curl-7.29.0-13.fc19

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

List of 8,000 FTP Credentials for Sale in Underground Forums

Hackers are targeting FTP upload sites with the hopes of redirecting victims to spam or even infecting webservers that rely on FTP applications for updates. Hold Security reported yesterday it had secured a list of credentials for close to 7,800 FTP sites being circulated in cybercrime forums. Th...

Titan FTP Server < 10.40 Build 1829 Directory Traversal Vulnerability

Binary data 8124.prm...

NetGear DGN2200 N300 Wireless Router - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Title: Multiple vulnerabilities in NETGEAR N300 WIRELESS ADSL2+ MODEM ROUTER DGN2200 ==================================================================================== Notification Date: 11 February 2014 Affected Vendor: NetGear Affecte...

Netgear DGN2200 N300 Wireless Router - Multiple Vulnerabilities

Title: Multiple vulnerabilities in NETGEAR N300 WIRELESS ADSL2+ MODEM ROUTER DGN2200 ==================================================================================== Notification Date: 11 February 2014 Affected Vendor: NetGear Affected Hardware: NetGear DGN2200 N300 Wireless ADSL2+ Modem Rout...

NETGEAR DGN2200 N300 Wireless Router - Multiple Vulnerabilities

NETGEAR DGN2200 N300 Wireless Router - Multiple Vulnerabilities Title: Multiple vulnerabilities in NETGEAR N300 WIRELESS ADSL2+ MODEM ROUTER DGN2200 ==================================================================================== Notification Date: 11 February 2014 Affected Vendor: NetGear...

RHEL 6 : wget (RHSA-2014:0151)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2014:0151 advisory. The wget package provides the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Wget provides various useful features, such as the...

Titan FTP Server < 10.40.1829 Multiple Directory Traversal Vulnerabilities

Titan FTP Server is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...